Penetration Tester / Red Team Analyst

Description

The team does offensive security work: penetration tests, attack simulations and Red Team exercises. The role finds and proves weaknesses in clients' systems, then helps make their defenses stronger.

The company is a European digital services firm with about 28,000 consultants and specialists, operating in 19 countries. It reported sales of 2.5 billion euros in 2023.

Responsibilities

• Carry out full penetration tests from first information gathering through exploitation, post-exploitation and writing up results.
• Take part in Red Team exercises and help design realistic attack scenarios.
• Find, exploit and confirm weaknesses in systems, applications, infrastructure and networks.
• Work with offensive security tools and frameworks such as OWASP and MITRE ATT&CK.
• Write technical and executive reports that include remediation advice.
• Talk with SOC, Blue Team, Infrastructure and Development staff, and with clients, to explain findings and answer questions.
• Help improve the Red Team's methods, techniques and tooling.

Requirements

• At least 2 years of experience in penetration testing, ethical hacking or Red Team work.
• You have carried out pentests on your own, covering scanning, exploitation, post-exploitation and reporting.
• Good working knowledge of networks, Windows and Linux systems, web applications and protocols.
• Hands-on experience with pentesting tools such as Metasploit, Burp Suite and Nmap.
• Strong command of offensive methodologies and frameworks such as OWASP and MITRE ATT&CK.
• You can read and explain vulnerabilities using CVE, CWE and CVSS.
• You communicate clearly with both technical colleagues and clients.
• You manage your own priorities and work without close supervision.
• You think critically, pay close attention to detail and reason analytically.
• You work well with multidisciplinary Red, Blue and SOC teams.
• You are proactive and curious, and you keep up with new techniques and emerging threats.